Johan Hovold 9e45284984 USB: serial: mxuport: fix use-after-free in probe error path ... The interface read and event URBs are submitted in attach, but were never explicitly unlinked by the driver. Instead the URBs would have been killed by usb-serial core on disconnect. In case of a late probe error (e.g. due to failed minor allocation), disconnect is never called and we could end up with active URBs for an unbound interface. This in turn could lead to deallocated memory being dereferenced in the completion callbacks. Fixes: ee467a1f20 ("USB: serial: add Moxa UPORT 12XX/14XX/16XX driver") Cc: stable <stable@vger.kernel.org> # v3.14 Signed-off-by: Johan Hovold <johan@kernel.org> Acked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2016-05-10 09:40:03 +02:00
..
aircable.c	USB: serial: correct spelling mistakes in comments	2014-01-03 12:39:31 -08:00
ark3116.c	usb: delete non-required instances of include <linux/init.h>	2014-01-08 15:01:39 -08:00
belkin_sa.c	usb: delete non-required instances of include <linux/init.h>	2014-01-08 15:01:39 -08:00
belkin_sa.h
bus.c	USB: serial: clean up bus probe error handling	2015-02-26 17:13:05 +01:00
ch341.c	USB: serial: fix compare_const_fl.cocci warnings	2016-02-28 14:35:58 +01:00
console.c	tty: Fix tty_init_termios() declaration	2016-01-27 14:28:20 -08:00
cp210x.c	USB: serial: cp210x: clean up CRTSCTS flag code	2016-05-05 11:48:09 +02:00
cyberjack.c	USB: serial: fix returnvar.cocci warnings	2016-02-28 14:36:53 +01:00
cypress_m8.c	USB: cypress_m8: add endpoint sanity check	2016-03-31 09:28:46 -07:00
cypress_m8.h	USB: cypress_m8: only wake up MSR queue on changes	2014-01-03 12:42:24 -08:00
digi_acceleport.c	USB: digi_acceleport: do sanity checking for the number of ports	2016-03-31 09:28:46 -07:00
empeg.c	usb: delete non-required instances of include <linux/init.h>	2014-01-08 15:01:39 -08:00
ezusb_convert.pl
f81232.c	USB: f81232: fix some minor style issues	2015-03-27 17:36:29 +01:00
ftdi_sio_ids.h	USB: serial: ftdi_sio: Add support for ICP DAS I-756xU devices	2016-04-07 11:12:55 +02:00
ftdi_sio.c	USB: serial: ftdi_sio: constify ftdi_sio_quirk structures	2016-04-25 12:38:06 +02:00
ftdi_sio.h	USB: serial: fix compare_const_fl.cocci warnings	2016-02-28 14:35:58 +01:00
garmin_gps.c	USB: serial: fix returnvar.cocci warnings	2016-02-28 14:36:53 +01:00
generic.c	USB: serial: fix infinite wait_until_sent timeout	2015-03-07 03:44:14 +01:00
io_16654.h
io_edgeport.c	USB: serial: io_edgeport: fix memory leaks in probe error path	2016-05-10 09:39:30 +02:00
io_edgeport.h
io_ionsp.h
io_tables.h
io_ti.c	USB: io_ti: Remove extra blank lines separating functions	2015-10-09 12:23:50 +02:00
io_ti.h
io_usbvend.h	USB: io_ti: fix firmware download on big-endian machines (part 2)	2014-05-27 15:12:57 -07:00
ipaq.c	USB: ipaq.c: fix a timeout loop	2015-12-18 09:30:34 -08:00
ipw.c	usb: delete non-required instances of include <linux/init.h>	2014-01-08 15:01:39 -08:00
ir-usb.c	USB: serial: remove redundant OOM messages	2014-01-03 12:31:46 -08:00
iuu_phoenix.c	USB: serial: fix boolinit.cocci warnings	2016-02-28 14:36:53 +01:00
iuu_phoenix.h
Kconfig	Revert "USB: serial: add Moxa UPORT 11x0 driver"	2016-03-01 11:01:33 +01:00
keyspan_pda.c	USB: keyspan_pda: add new device id	2015-03-19 18:04:01 +01:00
keyspan_usa26msg.h	USB: serial: correct spelling mistakes in comments	2014-01-03 12:39:31 -08:00
keyspan_usa28msg.h
keyspan_usa49msg.h
keyspan_usa67msg.h
keyspan_usa90msg.h
keyspan.c	USB: serial: keyspan: fix debug and error messages	2016-05-10 09:39:57 +02:00
keyspan.h
kl5kusb105.c	USB: serial: fix semicolon.cocci warnings	2016-02-28 14:36:53 +01:00
kl5kusb105.h
kobil_sct.c	USB-serial updates for v3.19-rc1	2014-11-26 10:41:46 -08:00
kobil_sct.h
Makefile	Revert "USB: serial: add Moxa UPORT 11x0 driver"	2016-03-01 11:01:33 +01:00
Makefile-keyspan_pda_fw
mct_u232.c	USB: mct_u232: add sanity checking in probe	2016-03-31 09:28:46 -07:00
mct_u232.h
metro-usb.c	usb: delete non-required instances of include <linux/init.h>	2014-01-08 15:01:39 -08:00
mos7720.c	tty: Use termios c_*flag macros	2016-01-28 14:13:44 -08:00
mos7840.c	USB patches for 4.6-rc1	2016-03-17 14:24:26 -07:00
mxuport.c	USB: serial: mxuport: fix use-after-free in probe error path	2016-05-10 09:40:03 +02:00
navman.c	usb: delete non-required instances of include <linux/init.h>	2014-01-08 15:01:39 -08:00
omninet.c	usb: delete non-required instances of include <linux/init.h>	2014-01-08 15:01:39 -08:00
opticon.c	USB: opticon: fix non-atomic allocation in write path	2014-11-03 09:07:30 +01:00
option.c	USB: option: add "D-Link DWM-221 B1" device id	2016-04-07 12:12:09 +02:00
oti6858.c	usb: delete non-required instances of include <linux/init.h>	2014-01-08 15:01:39 -08:00
oti6858.h
pl2303.c	USB: pl2303: fix baud-rate divisor calculations	2015-07-30 18:11:07 +02:00
pl2303.h	USB: pl2303: Remove support for Samsung I330	2015-04-29 12:34:24 +02:00
qcaux.c	usb: delete non-required instances of include <linux/init.h>	2014-01-08 15:01:39 -08:00
qcserial.c	USB: qcserial: add Sierra Wireless EM74xx device ID	2016-03-02 09:35:32 +01:00
quatech2.c	USB: serial: fix boolinit.cocci warnings	2016-02-28 14:36:53 +01:00
safe_serial.c	USB: serial: fix boolinit.cocci warnings	2016-02-28 14:36:53 +01:00
sierra.c	USB: sierra: add 1199:68AB device ID	2015-07-28 09:27:50 +02:00
spcp8x5.c	USB: serial: add missing newlines to dev_<level> messages.	2014-03-12 12:44:50 -07:00
ssu100.c	USB: ssu100: fix overrun-error reporting	2014-11-19 16:22:22 +01:00
symbolserial.c	USB: symbolserial: Correct transferred data size	2015-08-18 10:06:22 -07:00
ti_usb_3410_5052.c	USB: ti_usb_3410_5052: Add Honeywell HGI80 ID	2015-11-16 14:07:01 +01:00
ti_usb_3410_5052.h	USB: ti_usb_3410_5052: Add Honeywell HGI80 ID	2015-11-16 14:07:01 +01:00
usb_debug.c	usb: delete non-required instances of include <linux/init.h>	2014-01-08 15:01:39 -08:00
usb_wwan.c	USB: usb_wwan/option: generalize option_send_setup for other drivers	2015-10-09 12:42:40 +02:00
usb-serial-simple.c	USB: serial: Another Infineon flash loader USB ID	2015-11-23 10:32:59 +01:00
usb-serial.c	USB: serial: use IS_ENABLED() instead of checking for FOO || FOO_MODULE	2016-04-25 12:39:58 +02:00
usb-wwan.h	USB: usb_wwan/option: generalize option_send_setup for other drivers	2015-10-09 12:42:40 +02:00
visor.c	USB: serial: visor: fix crash on detecting device without write_urbs	2016-01-25 11:40:45 +01:00
visor.h	USB: serial: correct spelling mistakes in comments	2014-01-03 12:39:31 -08:00
whiteheat.c	USB: whiteheat: fix potential null-deref at probe	2015-09-23 12:15:19 -07:00
whiteheat.h
wishbone-serial.c	usb: delete non-required instances of include <linux/init.h>	2014-01-08 15:01:39 -08:00
xsens_mt.c	usb: serial: xsens_mt: always bind to interface number 1	2014-09-04 11:18:26 +02:00